Overview
Targeted attacks and advanced threats are customized to evade your conventional security defenses and remain hidden, while stealing your sensitive data or encrypting critical data until ransom demands are met. To detect targeted attacks and advanced threats, analysts and security experts agree that organizations should utilize advanced detection technology as part of an expanded strategy to address today’s evasive threats.
Deep Discovery Analyzer extends the value of existing security investments from Trend Micro and third parties (through a web services API) by providing custom sandboxing and advanced analysis. It can also provide expanded sandboxing capabilities to other Trend Micro products. Suspicious objects can be sent to the Analyzer sandbox for advanced analysis using multiple detection methods. If a threat is discovered, security solutions can be updated automatically.
Key Benefits
Better Detection
- Superior detection versus generic virtual environments.
- Superior evasion resistance.
Tangible ROI
- Enhance existing investments through integration and sharing of threat. intelligence and additional processing capacity for high traffic environments.
- Remove time consuming manual analysis of suspicious files.
- Protect against expensive ransomware remediation.
- Flexible deployment options for centralized or decentralized analysis.
Features
Custom Sandboxing
Custom sandboxes use virtual images to match your operating system applications, configurations, and patches. Difficult for hackers to evade, they include a “safe live mode” to analyze multi-stage downloads, URLs, C&C, and more. Sandboxing can be used as further sandboxing capacity for other Deep Discovery appliances or as a scalable stand-alone sandbox. Manual submission allows administrators to investigate suspicious objects.
See More and Respond Faster
Built-in security operations capabilities like XDR, risk insights, and more give you visibility and continuous risk assessment across the enterprise. Manage cyber risk better while being more agile.
Centralized Visibility and Investigation
Deep Discovery Analyzer is managed with a centralized management platform, Trend Micro Apex Central, which provides a holistic view of your security posture across all Trend Micro security solutions and shares threat updates with your existing security platforms. Deep Discovery offers custom image management and control across multiple Deep Discovery systems.
Prevent Data Breaches
Deep Discovery Analyzer is a turnkey appliance that uses virtual images of endpoint configurations to analyze and detect targeted attacks. By applying a blend of cross-generational detection techniques at the right place and time, it detects targeted attacks designed to evade standard security solutions.
Detect Targeted Ransomware
Organizations are increasingly becoming victims of targeted ransomware when advanced malware bypasses traditional security, encrypts data, and demands payment to release the data. Deep Discovery Inspector uses known and unknown patterns and reputation analysis to detect the latest ransomware attacks, including WannaCry. The customized sandbox detects mass file modifications, encryption behavior, and modifications to backup and restore processes.
Extend the value of your security
Many organizations have invested lots of money to deploy security solutions such as next-gen firewalls, IPS, endpoint security, and security gateways. Unfortunately, targeted attacks are designed to bypass these solutions. Deep Discovery Analyzer bridges solutions that provide security for known threats with protection from unknown threats and shares threat information back to these solutions.
Reduce Costs
The appliance extends the value of existing security and speeds up the time to detect and remediate targeted attacks. Incident response time is reduced and costs of remediation are lowered.